Online casino licences explained: UK, Malta, Curaçao & how to check

What the UK Gambling Commission, the Malta Gaming Authority & Curaçao’s Gaming Authority require of licensed sites, how complaints work, & where to check a licence.

What a licence means for you

A gambling licence connects a site to a regulator, a public body that sets rules the site must follow. What those rules are, & what a player can do when something goes wrong, depends on where the licence was issued.

The UK Gambling Commission (UKGC) warns in its guidance on staying safe online that illegal overseas websites “may not have any of the protections that we require”.

In a blog post published on 21 October 2025, the Commission’s Director of Enforcement & Intelligence, John Pierce, wrote that “unlicensed sites often lack age verification, responsible gambling tools, secure payment systems, and an appropriate dispute resolution scheme”.

The UK Gambling Commission

According to the UKGC, “Online gambling companies have to be licensed by us to provide gambling to British consumers.” Its consumer guidance was last updated on 6 May 2026.

The Commission says online gambling sites have facilities built in that let consumers set a limit & “control the time and money they are spending on that site”. Sites must also make their terms & conditions available & give access to historic account activity, showing when, how much & what someone has gambled on.

Self-exclusion is, in the UKGC’s words, “when you ask a gambling operator to stop you from gambling for a period of time”. GAMSTOP, which the Commission describes as an online multi-operator self-exclusion scheme, has been available since April 2018.

UK complaints & ADR

The UKGC’s guidance on Alternative Dispute Resolution, last updated on 15 May 2026, says a complaint must first go through the gambling business’s own complaints procedure. If you are not satisfied with the result, “after 8 weeks you can take your complaint to an ADR provider.”

Alternative Dispute Resolution (ADR) is a way of settling a dispute outside the courts. The Commission says “An ADR provider is a free, independent service” that looks at information from both you & the business.

The business should be able to tell you which ADR provider to use & give you its contact details. It may also issue a deadlock letter, which the UKGC describes as a letter usually given at the end of a complaint that confirms you can refer it to an ADR provider.

There are limits. The Commission says an ADR provider “will not accept complaints regarding a customer service issue, the refusal to accept a bet or your custom”, because a gambling business is free to decide who it accepts bets from & on what terms.

If you are unhappy with the final adjudication, you may be able to appeal if the provider has an appeals procedure. After that, the UKGC says you may decide to take your case to the small claims court, but should seek your own independent legal advice first.

The Malta Gaming Authority

The Malta Gaming Authority (MGA) sets minimum player tools under the Player Protection Directive (Directive 2 of 2018). According to the MGA’s remote gaming guidance, its licensees must let players self-exclude “for either a definite or indefinite timeframe”, & that option must be simple & easily accessible.

Operators must also let players set either deposit limits or wagering limits, & must offer reality checks, which the MGA describes as tools “to assist in maintaining control of their gambling”.

The MGA strongly encourages, but does not require, further tools: both kinds of limit rather than one, loss limits, time or session limits, & time-outs. A time-out works like self-exclusion but lasts “more than 24 hours and not more than 30 days”.

For complaints, the MGA’s Player Hub says its Player Support Unit “is open to receiving complaints from all individuals”. It treats a complaint as a report that any part of an MGA licensee’s gaming service “is unlawful, or conducted in a manner which is not safe, fair, or transparent”.

Curaçao’s 2024 law & the CGA

Curaçao’s National Ordinance on Games of Chance, known by its Dutch initials LOK, entered into force on 24 December 2024. A first-year overview by the Curaçao Gaming Authority, published in Curaçao Chronicle, says the CGA is the continuation of the Gaming Control Board, a foundation set up on 19 April 1999.

Under the LOK, the CGA became an independent public entity “with expanded powers in licensing, supervision, and enforcement”.

Yogonet reported on 21 October 2026 that the LOK “replaced the jurisdiction’s former master license and sublicense system with direct regulatory supervision by the CGA”. It said the reforms began in 2023 amid “international criticism of the previous licensing structure” & “increasing player complaints”.

The CGA’s overview lists the steps that followed. An integrated AML/CFT/FP policy, covering anti-money laundering & related controls, took effect on 9 January 2025. On 1 March 2025 the CGA moved to a new building & set up a dedicated Enforcement Unit, & it published a Responsible Gaming Policy on 17 April 2025.

Where Curaçao’s transition stands in 2026

The CGA said that as of 17 December 2025, “604 provisional licenses have been granted to operators (551 B2C) and suppliers (53 B2B)”. B2C refers to operators serving players & B2B to suppliers. It also reported 139 rejected applications & said reassessment of provisional licences was a priority for 2026.

According to Yogonet, the CGA discovered on 17 September 2026 that its licensing portal had been breached, with access reported between December 2025 & September 2026. It planned a temporary replacement portal on 19 October 2026 & said closing the old portal “does not invalidate existing gambling licenses or relieve operators of their regulatory obligations”.

Complaints about a Curaçao site

The CGA’s first-year overview says its updated Complaints Policy took effect on 18 June 2025, providing “clearer procedures for operators in their interactions with players”.

ADR guidelines followed on 8 September 2025, inviting organisations to apply as ADR providers. The CGA says “ADR supports the Complaints Policy by offering players an independent option when disputes cannot be resolved through an operator’s internal process”.

In that December 2025 overview, the CGA said six ADR applications were being processed.

How to check a licence

For Great Britain, the UKGC says: “To check whether a site is licensed, look for the link to our public register”. There you can see what type of activities the site is allowed to offer & whether the Commission has taken any action against it.

For Malta, the MGA says it “consistently carries out checks on suspicious websites” to protect players from misleading claims that a site holds an MGA licence. It publishes a full list of unauthorised URLs on its Player Hub.

For Curaçao, the CGA publishes a licence register, which Curaçao Chronicle describes as a PDF, & Yogonet reports that the regulator also operates a digital seal. Entries in the September 2026 register carried different statuses, including Indefinite, dated six-month entries & Assessment in progress.

Unlicensed sites, disputes & getting help

The UKGC’s October 2025 blog says “some illegal gambling sites are blocking payouts or setting withdrawal limits so high they’re unattainable”. It adds that consumers face “a lack of recourse if things go wrong”.

The Commission also points to “serious data protection concerns for players, with risks of identity theft and fraud”, & to risks associated with the targeting of vulnerable consumers through internet search terms such as “NotonGamstop”.

For support, the UKGC’s guidance points to the National Gambling Helpline, which provides confidential information, advice & support for anyone affected by gambling problems in England, Scotland & Wales.

Questions

How do I check whether a site holds a UK Gambling Commission licence?

The UKGC says to look for the link to its public register. The register shows what activities the site is allowed to offer & whether the Commission has taken action against it.

When can I take a UK complaint to ADR?

You must use the gambling business’s own complaints procedure first. If you are not satisfied, the UKGC says that after 8 weeks you can go to an ADR provider, which is free & independent.

What tools must Malta-licensed sites offer?

Under Directive 2 of 2018, MGA licensees must offer self-exclusion for a definite or indefinite period, either deposit or wagering limits, & reality checks.

Did Curaçao’s 2024 law end the old sublicence system?

Yes. The LOK took effect on 24 December 2024 &, according to Yogonet, replaced the master licence & sublicence system with direct supervision by the Curaçao Gaming Authority.

Did the CGA’s data breach cancel Curaçao licences?

According to Yogonet’s report of 21 October 2026, the CGA said closing the compromised portal does not invalidate existing gambling licences or relieve operators of their regulatory obligations.

Sources

• gamblingcommission.gov.uk
• gamblingcommission.gov.uk
• gamblingcommission.gov.uk
• mga.org.mt
• mga.org.mt
• curacaochronicle.com
• curacaochronicle.com
• yogonet.com

Sources checked 31 October 2026. Information only. 18+.